$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3626f4cc-9658-30e4-b100-bc5c6b102554.roa File: 3626f4cc-9658-30e4-b100-bc5c6b102554.roa (raw, json) Hash identifier: u3a5CXT8eCMhDNLrAXEoHkF/wGCNnKdyEo7P0n43jHU= Subject key identifier: 4E:FC:ED:7F:33:C6:0F:6C:8B:74:E7:36:34:9F:8D:ED:A8:15:0B:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847C1DF6A10272CEBE1519751E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3626f4cc-9658-30e4-b100-bc5c6b102554.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 33657 IP address blocks: 2001:559:a01b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:6a:10:27:2c:eb:e1:51:97:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=8c068149-61d4-453c-a1ba-39697e7e0f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:0a:2b:3a:25:fc:be:9a:45:6e:c0:63:dd: 0c:7b:8b:62:ad:31:a9:f8:c7:24:60:78:58:96:a8: 45:81:db:fa:93:58:ed:42:1f:4f:bc:69:b0:e6:29: b0:0d:72:08:5e:27:b4:ba:4a:f1:73:43:b9:fd:c8: f3:a6:2d:27:fe:75:ec:65:16:14:83:39:c2:84:a8: 20:9e:0d:3d:5f:9a:fa:23:bc:c2:28:5a:3b:65:e8: 14:2a:2a:6c:a2:80:33:17:ea:59:e1:4a:f8:d3:4c: 7a:74:0d:21:e2:09:14:b4:4d:2e:a1:6d:5f:93:62: c5:2b:b2:57:da:ba:84:97:e4:e7:67:8c:e6:53:a9: 14:0c:bd:3b:ec:5a:66:27:c7:06:7b:d4:3c:0b:d5: e3:9a:6a:99:76:48:8e:55:cf:20:c1:2b:c5:48:cf: fb:52:74:0d:48:ab:f3:cc:2b:2f:a1:0d:b3:90:e1: 89:00:54:36:ef:2c:5d:19:a8:ac:d7:4e:a6:d2:1b: b6:01:7e:43:fd:75:10:58:a0:c3:9f:0b:41:5b:7c: 7d:29:d8:11:ca:5f:e0:17:66:7e:cb:d5:2b:90:4c: 7b:9a:41:22:ab:42:e3:d2:35:ab:80:dd:db:e1:44: 57:76:31:aa:7b:3c:6d:e4:8a:ea:d4:db:c9:1a:c9: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:ED:7F:33:C6:0F:6C:8B:74:E7:36:34:9F:8D:ED:A8:15:0B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3626f4cc-9658-30e4-b100-bc5c6b102554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a01b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e6:df:60:5b:3b:54:27:ad:d6:bd:e0:0c:95:59:08:07:28: 37:31:2e:d0:4c:95:bf:81:26:af:82:ac:62:3d:41:7c:5a:81: 47:cc:1c:b6:1b:19:17:24:93:1c:f5:50:79:6a:4f:ff:ab:3e: 57:1b:69:2a:cf:e6:69:8c:fe:42:9d:bb:e7:7d:83:7f:84:ed: f4:e4:e2:26:05:9a:2f:28:0f:a6:90:be:2b:e1:76:7e:b5:40: d0:62:22:9e:a4:2b:7a:92:0f:9f:d7:07:8d:43:a5:cc:b4:01: e9:c8:47:68:0e:37:d8:71:e1:bd:02:9c:d0:13:6c:93:88:f6: 46:04:a3:d6:d1:c3:43:1c:ce:05:f9:ad:69:2e:25:7e:11:2f: 4c:9b:ff:7c:c8:91:1c:46:d1:5f:a8:47:df:fb:99:77:b6:bc: a8:82:2f:dd:82:76:c1:cc:f4:51:af:0d:ba:d3:50:30:3e:f3: 30:0a:6e:5b:00:88:be:20:ff:9b:28:fd:9e:e5:57:57:67:01: 77:81:f1:91:3a:12:18:fa:39:8d:65:75:22:bf:da:34:ee:40: d4:7b:1e:76:0d:c2:d8:7a:cd:33:6d:43:75:90:ed:04:09:24: 22:02:ca:f6:25:a3:d6:1d:b5:36:90:48:99:91:6f:f2:d3:eb: e5:4d:72:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB32oQJyzr4VGXUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk OGMwNjgxNDktNjFkNC00NTNjLWExYmEtMzk2OTdlN2UwZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjsKKzol/L6aRW7AY90Me4tirTGp+MckYHhY lqhFgdv6k1jtQh9PvGmw5imwDXIIXie0ukrxc0O5/cjzpi0n/nXsZRYUgznChKgg ng09X5r6I7zCKFo7ZegUKipsooAzF+pZ4Ur400x6dA0h4gkUtE0uoW1fk2LFK7JX 2rqEl+TnZ4zmU6kUDL077FpmJ8cGe9Q8C9XjmmqZdkiOVc8gwSvFSM/7UnQNSKvz zCsvoQ2zkOGJAFQ27yxdGais106m0hu2AX5D/XUQWKDDnwtBW3x9KdgRyl/gF2Z+ y9UrkEx7mkEiq0Lj0jWrgN3b4URXdjGqezxt5Irq1NvJGslaGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE787X8zxg9si3TnNjSfje2oFQsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzYyNmY0Y2MtOTY1OC0z MGU0LWIxMDAtYmM1YzZiMTAyNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLm32BbO1Qnrda94AyVWQgHKDcxLtBMlb+BJq+CrGI9QXxagUfM HLYbGRckkxz1UHlqT/+rPlcbaSrP5mmM/kKdu+d9g3+E7fTk4iYFmi8oD6aQvivh dn61QNBiIp6kK3qSD5/XB41Dpcy0AenIR2gON9hx4b0CnNATbJOI9kYEo9bRw0Mc zgX5rWkuJX4RL0yb/3zIkRxG0V+oR9/7mXe2vKiCL92CdsHM9FGvDbrTUDA+8zAK blsAiL4g/5so/Z7lV1dnAXeB8ZE6Ehj6OY1ldSK/2jTuQNR7HnYNwth6zTNtQ3WQ 7QQJJCICyvYlo9YdtTaQSJmRb/LT6+VNcrg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:22:20 2024 by rpki-client on console-fra.rpki-client.org